Bitsight Data and the Splunk Common Information Model Mapping

Bitsight findings are mapped to the Splunk Common Information Model, which links the Bitsight findings to default views in Splunk.

Compromised Systems 
Risk Vector

Splunk Model: Intrusion Detection, Malware

 

Open Ports, Web Application 
Headers, and Server Software 
Risk Vectors

Splunk Model: Endpoint, Ports

 

TLS/SSL Certificates Risk Vector

Splunk Model: Certificates

 

Critical Vulnerability 
Management Risk Vector

Splunk Model: Vulnerabilities

 

Potentially Exploited and 
Insecure Systems Risk Vectors

Splunk Model: Web

 

SPF Domains, DKIM Records, 
and DNSSEC Risk Vectors

Splunk Model: Network Resolutions (DNS)